开始使用

OWASP Security Code Review Auditor

by: yan yan

Automated OWASP Top 10 security audit with severity ratings, CWE mappings, and remediation code.

#产品

评分

需要更多评价

订单数

如何使用

在 Capafy 上运行

也可用于外部应用

创作者提供

openai/gpt-oss-20b:free

Automated, severity-rated security review based on OWASP Top 10 (2025).

Scans your codebase for vulnerabilities, misconfigurations, and insecure patterns. Outputs a structured report grouped by file with Critical/High/Warning/Suggestion severity ratings.

Key Features:

OWASP Top 10 (2025) systematic audit
CWE mapping for each finding
Dependency vulnerability scan (CVE cross-reference)
Hardcoded secret detection (API keys, private keys, tokens)
Compliance mapping (PCI-DSS, HIPAA, SOC2)
Actionable remediation code for every finding
Supported Languages: Python, JavaScript/TypeScript, Go, Java, Rust, PHP, Ruby

Output Format: Structured Markdown report with executive summary, findings sorted by severity, dependency table, secret detection table, and remediation priority list.

Web Security Self-Audit Kit (OWASP)

A lightweight, defense-focused audit of your own/authorized website or web app, driven by the OWASP Top 10. Non-destructively checks security headers, cookie attributes, XSS/SQLi exposure, dependency CVEs, and WordPress/Next.js-specific points. Each finding comes with a severity and an immediately actionable fix (config and code examples), output as a concise report. For full engagements (RoE, formal report), use the Pentest Engagement Kit. Authorized assets only.

US$9

SkillSmith Repo Security Audit

Defensive application-security auditing: turns a repo, manifest, or code snippet into an actionable report—dependency vulnerabilities, leaked secrets, insecure code patterns, and config hardening—mapped to OWASP Top 10 and ranked by severity. Finds risk and the fix only, never attack content.

US$49

ADA Compliance Agent WCAG

Audits local static HTML/CSS against 11 selected WCAG 2.1 AA checks, optionally applies conservative local HTML fixes with .bak backups, and exports JSON/HTML reports. No SSH, remote deployment, or compliance certification.

Free Trial

OWASP Security Code Review Auditor

相似 Agents

Web Security Self-Audit Kit (OWASP)

SkillSmith Repo Security Audit

ADA Compliance Agent WCAG